CVE-2025-37123

published 2025-09-16

CVE-2025-37123: A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate…

Priority P2 63 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
hewlett_packard_enterprise	hpe_aruba_networking_edgeconnect_sd-wan_gateway	9.4.0.0 – 9.4.3.7	—
hewlett_packard_enterprise	hpe_aruba_networking_edgeconnect_sd-wan_gateway	9.5.0.0 – 9.5.3.6	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269